This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RYPClBUkFpjYKBIOacDEYTZ-tvc.roa File: RYPClBUkFpjYKBIOacDEYTZ-tvc.roa (raw, json) Hash identifier: dBYUS/ZC4jYvPnmnmVFQKAPxmqNWWny1Ok7vE/XJge8= Subject key identifier: 45:83:C2:94:15:24:16:98:D8:28:12:0E:69:C0:C4:61:36:7E:B6:F7 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019AD6CC0E03E9DF21FC6D23824F25844B51 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RYPClBUkFpjYKBIOacDEYTZ-tvc.roa Signing time: Sun 30 Nov 2025 22:04:48 +0000 ROA not before: Sun 30 Nov 2025 22:04:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40676 IP address blocks: 45.43.147.0/24 maxlen: 24 45.43.152.0/24 maxlen: 24 104.222.160.0/24 maxlen: 24 104.222.163.0/24 maxlen: 24 104.222.164.0/24 maxlen: 24 104.222.165.0/24 maxlen: 24 104.222.166.0/24 maxlen: 24 104.239.74.0/24 maxlen: 24 104.239.79.0/24 maxlen: 24 104.239.89.0/24 maxlen: 24 104.239.102.0/24 maxlen: 24 104.239.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:cc:0e:03:e9:df:21:fc:6d:23:82:4f:25:84:4b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Nov 30 22:04:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4583c29415241698d828120e69c0c461367eb6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:c6:43:1d:58:85:9f:8a:0a:e1:cd:a4:c2: 59:f8:3a:e2:b3:3d:61:16:51:af:a8:1a:f7:69:15: d6:a2:47:3b:ba:2c:99:11:be:4a:7a:c4:a2:95:f9: 69:b2:7a:e7:a7:9e:af:77:c4:3c:46:e7:63:7c:12: 82:25:eb:63:09:35:08:63:5b:be:88:7c:80:3c:f8: 7e:57:b1:1e:ba:ba:5e:39:0a:00:97:0f:ce:8d:69: 55:35:17:6d:8f:06:dd:78:ea:21:a7:c8:5d:d1:35: cd:a9:34:05:3e:ce:e5:82:92:98:de:f3:c1:4a:42: ad:e9:3a:17:33:ed:b1:52:be:e4:67:d0:48:46:03: 7b:cf:66:84:8e:05:53:a9:b0:24:b8:4c:82:35:87: 91:09:af:32:00:f4:2a:d2:e5:5d:2a:bf:3f:fb:77: 80:01:80:90:7b:0e:80:08:f7:4c:47:94:50:69:28: 71:62:f8:f9:fa:31:58:d7:ba:70:7a:8a:9e:10:f7: 51:24:38:45:41:93:84:d8:18:79:9e:d9:c2:63:e2: 47:64:af:6f:d8:b4:f5:d2:e8:1e:5c:43:84:7a:a6: cc:53:d8:2f:36:b2:d0:48:ca:df:76:60:f0:bb:08: 18:01:32:7d:ee:eb:e8:b1:f3:b3:d6:b3:1b:28:37: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:C2:94:15:24:16:98:D8:28:12:0E:69:C0:C4:61:36:7E:B6:F7 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RYPClBUkFpjYKBIOacDEYTZ-tvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.147.0/24 45.43.152.0/24 104.222.160.0/24 104.222.163.0-104.222.166.255 104.239.74.0/24 104.239.79.0/24 104.239.89.0/24 104.239.102.0/24 104.239.109.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:b1:d8:43:86:15:fc:f7:39:5d:af:52:5e:e4:cc:4e:fe:70: 04:f6:4a:54:16:a2:da:8c:f3:ec:54:a2:15:5a:a1:ad:4c:ce: f5:e8:26:ff:d3:a2:73:91:ca:c0:05:69:af:f3:ca:aa:aa:a9: 28:4a:ae:0a:26:da:4a:ea:ed:c7:a8:29:6a:fc:9e:7d:dc:21: e7:e4:21:70:84:f4:1e:0c:b2:66:56:37:41:e8:7b:03:64:d0: 25:ff:41:82:38:25:bb:e6:a1:f7:c7:ac:b0:a3:0e:64:04:0e: 90:29:76:01:ca:f5:af:cf:4e:3f:40:55:1c:f2:14:d8:ff:08: e7:0a:2e:73:cb:4b:67:83:c9:0c:bc:74:77:4d:14:ac:13:6e: ff:d7:a4:ac:3a:6c:c8:12:b1:f5:b1:02:6e:f6:29:bd:93:91: 84:8b:48:dc:a1:21:48:9c:06:43:f6:c3:31:4f:0b:95:e1:1d: 8f:01:f2:b3:1f:5d:3a:b4:08:fa:da:9b:8b:69:bd:61:fa:25: a8:20:c8:9b:2e:57:a3:8d:7c:cf:9a:3c:ff:71:ff:78:2c:72: 8b:29:80:7b:96:c8:df:63:e8:c0:00:54:b0:b5:cd:39:d9:b0: fc:8b:aa:0d:b8:e6:0e:3b:46:38:e4:b3:2d:73:41:d0:7a:d7: cb:c9:3d:a0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZrWzA4D6d8h/G0jgk8lhEtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjUxMTMwMjIwNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTgzYzI5NDE1MjQxNjk4ZDgyODEyMGU2OWMwYzQ2MTM2N2ViNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EHGQx1YhZ+KCuHNpMJZ+Drisz1h FlGvqBr3aRXWokc7uiyZEb5KesSilflpsnrnp56vd8Q8RudjfBKCJetjCTUIY1u+ iHyAPPh+V7EeurpeOQoAlw/OjWlVNRdtjwbdeOohp8hd0TXNqTQFPs7lgpKY3vPB SkKt6ToXM+2xUr7kZ9BIRgN7z2aEjgVTqbAkuEyCNYeRCa8yAPQq0uVdKr8/+3eA AYCQew6ACPdMR5RQaShxYvj5+jFY17pweoqeEPdRJDhFQZOE2Bh5ntnCY+JHZK9v 2LT10ugeXEOEeqbMU9gvNrLQSMrfdmDwuwgYATJ97uvosfOz1rMbKDdAtwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEWDwpQVJBaY2CgSDmnAxGE2frb3MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvUllQQ2xCVWtGcGpZS0JJT2FjREVZVFotdHZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALSuTAwQA LSuYAwQAaN6gMAwDBABo3qMDBABo3qYDBABo70oDBABo708DBABo71kDBABo72YD BABo720wDQYJKoZIhvcNAQELBQADggEBAFqx2EOGFfz3OV2vUl7kzE7+cAT2SlQW otqM8+xUohVaoa1MzvXoJv/TonORysAFaa/zyqqqqShKrgom2krq7ceoKWr8nn3c IefkIXCE9B4MsmZWN0HoewNk0CX/QYI4JbvmoffHrLCjDmQEDpApdgHK9a/PTj9A VRzyFNj/COcKLnPLS2eDyQy8dHdNFKwTbv/XpKw6bMgSsfWxAm72Kb2TkYSLSNyh IUicBkP2wzFPC5XhHY8B8rMfXTq0CPram4tpvWH6JaggyJsuV6ONfM+aPP9x/3gs cospgHuWyN9j6MAAVLC1zTnZsPyLqg245g47Rjjksy1zQdB618vJPaA= -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:38 2025 by rpki-client